C Board  

Go Back   C Board > Platform Specific Boards > Linux Programming

Reply
 
LinkBack Thread Tools Display Modes
Old 06-14-2006, 09:49 PM   #1
Registered User
 
Join Date: Jan 2006
Posts: 62
Security

I'm wanting my program to pass a command to the system which will unzip a password protected zip file. How can I make this system call that will include the password without someone being able to evesdrop and obtain the password? Also, by storing the password in my program as a string, would some one be able to somehow obtain the password from the binary?

Last edited by 3saul; 06-14-2006 at 09:58 PM.
3saul is offline   Reply With Quote
Old 06-15-2006, 01:25 AM   #2
and the hat of Jobseeking
 
Salem's Avatar
 
Join Date: Aug 2001
Location: The edge of the known universe
Posts: 21,680
> would some one be able to somehow obtain the password from the binary?
Unless you do something to hide it, it will be trivial to find for anyone who knows what a hex editor is.

> How can I make this system call that will include the password without someone being able to evesdrop
Probably with great difficulty.
Many system calls can be traced for debugging, so naturally anything you pass will be plainly visible to anyone with the right tools.
__________________
If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.

Salem is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Freedom Internet Security BestGameMovie Tech Board 3 06-03-2005 09:28 PM
Security on automated home stimpyzu A Brief History of Cprogramming.com 4 04-11-2004 01:14 AM
Painfully true but funny... shaik786 A Brief History of Cprogramming.com 8 04-01-2003 03:39 PM
WindowsXP Security Dude101 A Brief History of Cprogramming.com 19 10-03-2001 01:22 PM
security iain A Brief History of Cprogramming.com 0 09-20-2001 08:46 PM


All times are GMT -6. The time now is 11:55 PM.


Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.3.2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22